IP and domain reputation lookup
BadBot Gateway scores IP addresses and domains by the abuse that BadBot's own honeypot sensors catch, such as scanners, brute-force bots and exploit probes, with recent activity counting most. Search an indicator for its score, report history and categories, or download the high-risk feeds; how the sensor network works is explained at badbot.net.
Reputation 89.191.237.9 ip
Score
97
/100
raw: 33.92
Reports
6
Last Reported
2026-10-30 01:02 UTC
Categories
Web Stack Probe (6)
Network details
ASN
12389
Organization
Rostelecom
Country
RU
Threat Intelligence enriched 2026-10-30 01:02 UTC
DNSBL Status
Clean
Sensor Activity last 6 events
| Time (UTC) | Trap | Signal | Method | Path | Flags | Sensor |
|---|---|---|---|---|---|---|
| 2026-10-30 01:02 UTC | wp-json | direct | GET | /wp-json/ldlms/v2/users | burst | EU West Sensor 4 |
| 2026-10-30 01:02 UTC | wp-json | direct | GET | /wp-json/ultimate-member/v1/users | burst | EU West Sensor 4 |
| 2026-10-30 01:02 UTC | wp-json | direct | GET | /wp-json/buddypress/v1/members | EU West Sensor 4 | |
| 2026-10-30 01:02 UTC | wp-json | direct | GET | /wp-json/dokan/v1/wholesale/customers | EU West Sensor 4 | |
| 2026-10-30 01:02 UTC | wp-json | direct | GET | /wp-json/dokan/v1/wholesale/customers | EU West Sensor 4 | |
| 2026-10-30 01:02 UTC | wp-json | direct | GET | /wp-json/dokan/v1/wholesale/customers | EU West Sensor 4 |
Recent Indicators
| Indicator | Type | Score | Reports | Country | Last Reported | First Seen |
|---|---|---|---|---|---|---|
| 102.216.1.152 | ip |
100
|
27 | ZA | 2026-10-30 02:13 UTC | 2026-10-30 02:10 UTC |
| 82.229.86.228 | ip |
100
|
29 | FR | 2026-10-30 02:13 UTC | 2026-10-30 02:10 UTC |
| 73.66.140.213 | ip |
100
|
27 | US | 2026-10-30 02:13 UTC | 2026-10-30 02:10 UTC |
| 190.82.204.191 | ip |
97
|
6 | CL | 2026-10-30 02:10 UTC | 2026-10-30 02:09 UTC |
| 14.192.213.176 | ip |
98
|
6 | MY | 2026-10-30 02:10 UTC | 2026-10-30 02:09 UTC |
| 112.208.244.24 | ip |
95
|
5 | PH | 2026-10-30 02:10 UTC | 2026-10-30 02:09 UTC |
| 82.167.54.114 | ip |
18
|
1 | SA | 2026-10-30 02:09 UTC | 2026-10-30 02:09 UTC |
| 197.184.94.207 | ip |
63
|
2 | ZA | 2026-10-30 02:09 UTC | 2026-10-30 02:09 UTC |
| 177.0.181.111 | ip |
96
|
5 | BR | 2026-10-30 02:09 UTC | 2026-10-30 02:09 UTC |
| 62.183.17.154 | ip |
89
|
4 | RU | 2026-10-30 02:09 UTC | 2026-10-30 02:08 UTC |
| 73.151.11.200 | ip |
86
|
4 | US | 2026-10-30 02:09 UTC | 2026-10-30 02:08 UTC |
| 84.201.4.119 | ip |
100
|
11 | NL | 2026-10-30 01:59 UTC | 2026-10-30 01:59 UTC |
| 177.92.48.71 | ip |
93
|
5 | BR | 2026-10-30 01:56 UTC | 2026-10-30 01:56 UTC |
| 169.224.63.185 | ip |
94
|
5 | IQ | 2026-10-30 01:56 UTC | 2026-10-30 01:56 UTC |
| 186.193.31.186 | ip |
100
|
27 | BR | 2026-10-30 02:01 UTC | 2026-10-30 01:56 UTC |
| 86.99.105.135 | ip |
100
|
31 | AE | 2026-10-30 02:01 UTC | 2026-10-30 01:56 UTC |
| 175.136.141.197 | ip |
100
|
23 | MY | 2026-10-30 02:01 UTC | 2026-10-30 01:56 UTC |
| 103.31.11.166 | ip |
99
|
9 | BD | 2026-10-30 01:50 UTC | 2026-10-30 01:49 UTC |
| 181.11.4.94 | ip |
99
|
7 | AR | 2026-10-30 01:49 UTC | 2026-10-30 01:48 UTC |
| 27.130.118.214 | ip |
100
|
19 | TH | 2026-10-30 01:48 UTC | 2026-10-30 01:45 UTC |
| 190.5.38.50 | ip |
100
|
25 | CL | 2026-10-30 01:48 UTC | 2026-10-30 01:45 UTC |
| 160.238.226.74 | ip |
100
|
26 | BR | 2026-10-30 01:48 UTC | 2026-10-30 01:45 UTC |
| 74.208.195.166 | ip |
50
|
1 | DE | 2026-10-30 01:44 UTC | 2026-10-30 01:44 UTC |
| 91.200.11.35 | ip |
100
|
33 | UA | 2026-10-30 01:48 UTC | 2026-10-30 01:44 UTC |
| 200.50.234.218 | ip |
100
|
29 | EC | 2026-10-30 01:48 UTC | 2026-10-30 01:44 UTC |
Showing 1-25 of 77134 indicators